Route Origin Authorization
$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ONjM10ydN7-5aD_fAH9QKA7g9TI.roa
File: ONjM10ydN7-5aD_fAH9QKA7g9TI.roa (raw, json)
Hash identifier: NNywfh15fLnNDW6zS/8Plmc4nxuvXXzP12KlEhhiNpg=
Subject key identifier: 38:D8:CC:D7:4C:9D:37:BF:B9:68:3F:DF:00:7F:50:28:0E:E0:F5:32
Certificate issuer: /CN=EB675F938C85021374CAB1E1AF5099319B110B07
Certificate serial: 2807
Authority key identifier: EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
Authority info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
Subject info access: rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ONjM10ydN7-5aD_fAH9QKA7g9TI.roa
Signing time: Fri 01 Sep 2023 10:04:51 +0000
ROA not before: Fri 01 Sep 2023 10:04:51 +0000
ROA not after: Sat 31 Aug 2024 03:10:53 +0000
asID: 38841
IP address blocks: 106.1.133.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10247 (0x2807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EB675F938C85021374CAB1E1AF5099319B110B07
Validity
Not Before: Sep 1 10:04:51 2023 GMT
Not After : Aug 31 03:10:53 2024 GMT
Subject: CN=38D8CCD74C9D37BFB9683FDF007F50280EE0F532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0e:fd:96:2a:bb:40:cc:c2:de:75:83:5f:ca:
fe:6f:1e:d3:62:0a:d6:a5:07:eb:f2:16:6c:be:26:
41:f3:20:83:f5:d5:9d:05:4f:91:c8:78:ed:4a:b8:
18:c0:23:77:44:ba:41:7c:2f:86:75:0a:f1:06:ad:
e0:c1:b4:13:1b:d8:c1:3f:eb:7a:0a:b9:ac:3b:2c:
63:0c:13:2f:23:c0:00:d6:3b:f2:a0:df:75:f0:f3:
4e:e8:f3:9e:e7:5c:db:1c:b3:74:7d:84:fc:4c:51:
7f:48:45:7a:b9:75:d4:36:17:72:0d:51:17:9f:15:
78:3b:ea:ba:c4:09:5b:f7:1d:74:40:0d:0e:d4:02:
0f:9d:2b:ec:6a:3a:46:50:06:65:5c:fe:60:fd:ec:
65:60:0b:92:3e:e8:79:20:96:26:19:87:1e:8c:dd:
ce:12:a8:91:51:a0:1d:a8:31:0e:ac:c1:3f:a5:77:
95:d6:88:7c:ce:fd:87:4d:d9:1e:b2:70:41:61:49:
28:7e:d1:6a:d7:20:84:81:ab:d2:17:45:ac:0c:1e:
45:dd:65:d7:2d:01:0f:a7:45:f7:da:48:a0:6a:97:
0a:04:1b:91:a8:c9:38:81:4d:64:07:60:90:e6:c4:
37:58:9f:69:be:52:26:88:69:9e:e2:d4:19:86:fb:
0e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D8:CC:D7:4C:9D:37:BF:B9:68:3F:DF:00:7F:50:28:0E:E0:F5:32
X509v3 Authority Key Identifier:
keyid:EB:67:5F:93:8C:85:02:13:74:CA:B1:E1:AF:50:99:31:9B:11:0B:07
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/62dfk4yFAhN0yrHhr1CZMZsRCwc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/62dfk4yFAhN0yrHhr1CZMZsRCwc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/TUNGHO/ONjM10ydN7-5aD_fAH9QKA7g9TI.roa
RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
106.1.133.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:88:3b:32:4e:09:b4:41:e0:67:9e:b0:fd:c7:77:e8:6e:3c:
73:bf:be:79:2d:bf:2f:11:cd:cc:21:10:0e:2a:04:29:27:f7:
e2:41:05:e1:d6:06:56:f5:f1:6c:bd:70:26:3c:2f:b4:e8:53:
29:60:f9:4a:21:11:55:ff:ee:b6:7e:ed:e2:0b:c9:98:ce:bc:
20:d0:07:a2:df:30:19:74:f0:d5:a6:cf:51:c2:23:b8:1e:b1:
f7:d7:4e:98:f2:72:5e:39:c4:7b:f1:f3:08:60:5e:13:e6:77:
1d:6a:bd:fd:18:32:cb:71:08:46:41:4c:f5:e2:49:6a:0e:00:
98:45:7e:20:81:85:a7:10:01:e5:c3:9b:e9:3f:48:e0:af:53:
79:7d:76:bc:55:ec:02:22:f3:68:bd:d3:67:db:7d:a9:06:c6:
b2:52:69:07:7c:7e:42:db:3a:d7:71:41:0b:d1:f1:c2:1c:94:
dd:c8:68:72:cb:ec:de:bf:45:85:22:d5:7b:4c:48:86:05:c8:
15:3d:07:c5:5f:01:84:c5:7e:85:8a:7b:a0:76:2e:63:9f:4b:
17:04:af:17:26:56:83:6a:98:9a:0d:4d:b8:7a:e8:5b:1d:33:
42:4d:cd:96:35:fa:1a:5c:61:41:a0:77:68:94:83:2a:5b:db:
d9:28:3b:26
-----BEGIN CERTIFICATE-----
MIIE0jCCA7qgAwIBAgICKAcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRUI2
NzVGOTM4Qzg1MDIxMzc0Q0FCMUUxQUY1MDk5MzE5QjExMEIwNzAeFw0yMzA5MDEx
MDA0NTFaFw0yNDA4MzEwMzEwNTNaMDMxMTAvBgNVBAMTKDM4RDhDQ0Q3NEM5RDM3
QkZCOTY4M0ZERjAwN0Y1MDI4MEVFMEY1MzIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDfDv2WKrtAzMLedYNfyv5vHtNiCtalB+vyFmy+JkHzIIP11Z0F
T5HIeO1KuBjAI3dEukF8L4Z1CvEGreDBtBMb2ME/63oKuaw7LGMMEy8jwADWO/Kg
33Xw807o857nXNscs3R9hPxMUX9IRXq5ddQ2F3INURefFXg76rrECVv3HXRADQ7U
Ag+dK+xqOkZQBmVc/mD97GVgC5I+6HkgliYZhx6M3c4SqJFRoB2oMQ6swT+ld5XW
iHzO/YdN2R6ycEFhSSh+0WrXIISBq9IXRawMHkXdZdctAQ+nRffaSKBqlwoEG5Go
yTiBTWQHYJDmxDdYn2m+UiaIaZ7i1BmG+w6zAgMBAAGjggHuMIIB6jAdBgNVHQ4E
FgQUONjM10ydN7+5aD/fAH9QKA7g9TIwHwYDVR0jBBgwFoAU62dfk4yFAhN0yrHh
r1CZMZsRCwcwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg
T6BNhktyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hP
LzYyZGZrNHlGQWhOMHlySGhyMUNaTVpzUkN3Yy5jcmwwYAYIKwYBBQUHAQEEVDBS
MFAGCCsGAQUFBzAChkRyc3luYzovL3Jwa2ljYS50d25pYy50dy9ycGtpL1RXTklD
Q0EvNjJkZms0eUZBaE4weXJIaHIxQ1pNWnNSQ3djLmNlcjAOBgNVHQ8BAf8EBAMC
B4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jwa2lj
YS50d25pYy50dy9ycGtpL1RXTklDQ0EvVFVOR0hPL09Oak0xMHlkTjctNWFEX2ZB
SDlRS0E3ZzlUSS5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnJkcC50d25pYy50
dy9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABq
AYUwDQYJKoZIhvcNAQELBQADggEBALOIOzJOCbRB4GeesP3Hd+huPHO/vnktvy8R
zcwhEA4qBCkn9+JBBeHWBlb18Wy9cCY8L7ToUylg+UohEVX/7rZ+7eILyZjOvCDQ
B6LfMBl08NWmz1HCI7gesffXTpjycl45xHvx8whgXhPmdx1qvf0YMstxCEZBTPXi
SWoOAJhFfiCBhacQAeXDm+k/SOCvU3l9drxV7AIi82i902fbfakGxrJSaQd8fkLb
OtdxQQvR8cIclN3IaHLL7N6/RYUi1XtMSIYFyBU9B8VfAYTFfoWKe6B2LmOfSxcE
rxcmVoNqmJoNTbh66FsdM0JNzZY1+hpcYUGgd2iUgypb29koOyY=
-----END CERTIFICATE-----
Generated at Mon Aug 26 10:35:18 2024 by rpki-client on console-ams.rpki-client.org